$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: m91mRsu97XUF20nwcARcpOEiTQowSDXfomOPHUE2Pv8= Subject key identifier: 39:C0:76:35:43:9D:58:9B:C4:63:C4:40:40:72:C5:62:9F:CB:CD:03 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 4D6D99AE9395E2BB301A5C5D0808F2BEECB35205 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 4D Signing time: Sat 23 Aug 2025 08:20:53 +0000 Manifest this update: Sat 23 Aug 2025 08:15:53 +0000 Manifest next update: Sun 24 Aug 2025 11:27:53 +0000 Files and hashes: 1: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 2: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 3: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 4: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 5: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 6: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 7: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 8: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 9: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 10: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 11: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 12: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 13: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: G2PeaoaBYzc8pOZxi3CrRGWAAWhO01pKQTA3GyTORwA=) 14: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 15: 326131343a373538303a666637613a3a2f34382d3438203d3e20313437313831.roa (hash: 5RP7M7zYFqJ8+Jv2ZfpyR8ID3GlBhQWXQs6XRm7WB50=) 16: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 17: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6d:99:ae:93:95:e2:bb:30:1a:5c:5d:08:08:f2:be:ec:b3:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Aug 23 08:15:53 2025 GMT Not After : Aug 24 11:27:53 2025 GMT Subject: CN=39C07635439D589BC463C4404072C5629FCBCD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d7:dd:ed:06:65:f9:e5:c4:1c:82:76:8c:bd: 05:8c:05:3a:62:87:89:a8:1b:21:82:1b:c5:87:d2: e0:49:16:6a:21:2b:4f:c8:34:fb:68:1e:ad:b6:22: 7a:eb:d1:c9:8d:a0:b0:52:a5:f8:b0:8e:f7:98:ab: 84:2b:25:b3:68:57:f9:a3:5a:3b:85:98:31:cc:9b: a4:eb:86:cb:34:0a:db:83:c9:87:f7:2c:7b:85:75: 5d:93:d2:f3:b3:32:a8:8b:23:b6:91:a6:84:5d:2f: 17:52:f5:4c:41:a8:e8:92:92:26:67:9b:fa:44:58: b9:15:09:5c:f1:34:da:47:4b:90:fd:68:17:de:22: 6d:fd:70:82:61:85:06:88:cd:00:f6:25:f7:8e:eb: 3b:e9:5a:d7:a5:eb:d5:50:2d:be:8e:6e:1f:8b:18: b0:81:0d:bf:9d:1d:a4:e8:2b:09:5b:d3:5c:c8:af: 21:bc:0d:00:ca:82:54:1a:bb:7d:0b:6a:4f:f5:5d: d2:a7:63:4f:6a:25:0b:c0:4f:8b:46:56:07:27:81: 92:68:3e:a2:0a:ab:06:b0:84:be:27:55:6c:5e:d1: 1c:d1:10:fd:64:e4:42:0c:74:f1:39:ae:71:e4:56: 92:d9:7a:8b:3b:4e:ac:7f:f2:6a:84:19:33:72:ec: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:76:35:43:9D:58:9B:C4:63:C4:40:40:72:C5:62:9F:CB:CD:03 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:f0:26:dc:d6:56:69:f3:75:bf:41:58:34:cc:3d:a9:20: 6e:b1:b2:6d:59:6f:29:36:e8:a7:5f:a4:b3:42:0a:78:02:4d: 72:3c:09:99:4e:5b:69:6f:91:87:96:ca:87:96:54:8b:36:42: a4:80:ea:61:aa:46:79:ba:0e:ff:24:f1:9e:27:bb:dd:ef:1f: d9:99:e4:15:f9:39:34:b3:dd:28:35:bf:5e:c7:a9:c4:69:4e: 9c:54:08:ce:ff:1e:74:a7:b0:11:18:00:5a:4d:6a:f5:c3:0b: 4e:f5:3b:cc:d9:46:78:50:a2:bd:b3:26:3b:32:60:b2:a6:66: 11:f4:ca:43:53:1e:b0:ca:41:da:1b:61:1b:ca:bf:62:80:cc: 76:30:82:74:b5:af:07:3a:fc:73:9b:c4:d2:86:dd:99:5c:a2: 51:7e:b2:f8:4a:9f:ec:71:60:71:41:06:1d:1b:35:b7:e0:4a: a6:fd:6b:3b:9d:25:5c:98:88:af:dc:e7:6e:12:43:e1:77:0c: fd:42:b1:1d:c1:73:83:a4:16:be:8e:e2:b8:dc:4a:8b:38:83: d8:24:01:dd:29:a5:da:3f:b5:fa:94:0c:e8:e4:b2:aa:3e:75: 35:db:1e:40:ee:e9:53:4d:cd:e8:80:b8:fc:17:9f:85:e3:8f: 4f:45:74:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTW2ZrpOV4rswGlxdCAjyvuyzUgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA4MjMwODE1NTNaFw0yNTA4MjQxMTI3NTNaMDMxMTAvBgNV BAMTKDM5QzA3NjM1NDM5RDU4OUJDNDYzQzQ0MDQwNzJDNTYyOUZDQkNEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq193tBmX55cQcgnaMvQWMBTpi h4moGyGCG8WH0uBJFmohK0/INPtoHq22Inrr0cmNoLBSpfiwjveYq4QrJbNoV/mj WjuFmDHMm6Trhss0CtuDyYf3LHuFdV2T0vOzMqiLI7aRpoRdLxdS9UxBqOiSkiZn m/pEWLkVCVzxNNpHS5D9aBfeIm39cIJhhQaIzQD2JfeO6zvpWtel69VQLb6Obh+L GLCBDb+dHaToKwlb01zIryG8DQDKglQau30Lak/1XdKnY09qJQvAT4tGVgcngZJo PqIKqwawhL4nVWxe0RzREP1k5EIMdPE5rnHkVpLZeos7Tqx/8mqEGTNy7GLfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOcB2NUOdWJvEY8RAQHLFYp/LzQMwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdcfAm 3NZWafN1v0FYNMw9qSBusbJtWW8pNuinX6SzQgp4Ak1yPAmZTltpb5GHlsqHllSL NkKkgOphqkZ5ug7/JPGeJ7vd7x/ZmeQV+Tk0s90oNb9ex6nEaU6cVAjO/x50p7AR GABaTWr1wwtO9TvM2UZ4UKK9syY7MmCypmYR9MpDUx6wykHaG2Ebyr9igMx2MIJ0 ta8HOvxzm8TSht2ZXKJRfrL4Sp/scWBxQQYdGzW34Eqm/Ws7nSVcmIiv3OduEkPh dwz9QrEdwXODpBa+juK43EqLOIPYJAHdKaXaP7X6lAzo5LKqPnU12x5A7ulTTc3o gLj8F5+F449PRXRv -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:47 2025 by rpki-client